$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/d2bbd598-d050-3e9c-b8b7-18a976731d02.roa File: d2bbd598-d050-3e9c-b8b7-18a976731d02.roa (raw, json) Hash identifier: /d1CxDinJgRK3yggHP5ptRgMDkGfSMSxsVRvJrl3SgY= Subject key identifier: 12:51:5E:E0:C0:80:9A:F2:40:76:47:AE:B8:62:86:8C:11:70:EB:29 Certificate issuer: /CN=063abcef-47ff-4267-9198-eb628aba7842 Certificate serial: 010D0C9F4328584EA7884FE58718065A2A80C500 Authority key identifier: 2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/d2bbd598-d050-3e9c-b8b7-18a976731d02.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 397976 IP address blocks: 158.247.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:4f:e5:87:18:06:5a:2a:80:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=063abcef-47ff-4267-9198-eb628aba7842 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=3f168748-e9b3-4975-9a5a-e178996226a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5b:23:4b:53:72:a9:f0:a6:b5:ce:6d:75:54: 56:e7:1b:34:16:f7:95:88:f8:68:99:7e:84:73:51: 16:67:5d:cd:28:d9:f4:b4:55:36:a3:1c:3b:34:73: 13:cd:d4:11:84:55:59:5b:de:07:8b:69:c3:0c:1b: 4d:6a:07:d5:3a:28:e4:3d:da:24:da:f1:63:d0:0e: da:b4:54:9b:32:22:7f:74:c2:ee:93:f3:ff:71:44: a1:3f:60:a4:f9:82:23:9f:4f:8c:46:12:0f:f6:19: 86:7c:4a:4a:9a:02:9b:d5:f9:63:5d:61:ff:f5:15: 28:30:72:45:06:04:04:81:29:ba:33:04:a9:e0:bf: 7b:bd:44:66:b2:f3:f0:ce:ec:12:2d:08:ab:86:68: eb:0b:6b:bb:00:20:52:38:0f:67:e5:16:b6:b0:a1: 71:32:70:9c:31:70:93:f0:d5:39:5f:2f:ba:dd:59: b4:53:13:aa:c4:12:f7:fc:1e:13:9d:1c:07:81:0b: 29:2b:66:f1:49:48:25:60:8c:fb:c0:9d:35:1a:08: 4b:f2:2c:7e:8b:f2:93:63:0c:87:3e:c8:c9:83:74: 28:3c:be:26:f0:19:34:ed:7e:2e:a2:68:9e:0c:15: 78:e8:b0:fd:4d:bf:ad:43:10:06:eb:e8:0c:a8:3b: a8:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:51:5E:E0:C0:80:9A:F2:40:76:47:AE:B8:62:86:8C:11:70:EB:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/d2bbd598-d050-3e9c-b8b7-18a976731d02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl X509v3 Authority Key Identifier: keyid:2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer sbgp-ipAddrBlock: critical IPv4: 158.247.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:99:95:e2:01:bb:08:bd:6b:d0:ae:61:9c:fa:4b:fe:d5:a5: 44:fe:86:b9:52:5d:41:cb:e5:71:a9:4a:d0:6d:d9:33:61:02: bd:28:99:b5:84:9b:45:21:e4:9b:f8:e2:da:5b:28:a7:06:22: 8c:dd:be:05:d8:5b:59:e0:e0:79:5f:80:a7:15:6f:f9:43:f0: 99:c8:85:4f:80:9a:27:b3:82:81:9d:c9:12:1b:32:5b:4e:3c: d2:59:32:0c:1f:61:26:5c:4f:4d:ec:f7:33:84:ba:58:05:32: eb:a6:f7:81:79:01:91:01:77:ba:f6:cb:4e:ee:51:e6:2d:48: b9:65:da:5d:06:9a:7c:1e:c5:7b:2f:54:66:1b:3b:5d:93:3b: 89:23:e0:98:ef:a1:0d:e8:4e:a6:2a:fb:02:9c:ec:93:34:ab: 78:7d:df:7e:61:fc:83:15:94:a7:56:83:cb:41:a8:be:f0:14: 25:07:be:88:ad:c7:cc:da:2d:c1:b3:7e:12:83:2a:cc:93:af: 8a:82:6f:82:fc:6d:0d:59:d4:b4:18:2b:c5:3b:5c:0e:81:56: 88:d0:35:d6:75:6f:ab:35:d2:c4:bf:22:56:73:2e:81:c1:cb: cf:ec:91:35:86:fb:08:e2:88:de:83:d4:da:fe:b5:b1:59:ba: 7f:0a:5f:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niE/lhxgGWiqAxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDYzYWJjZWYtNDdmZi00MjY3LTkxOTgtZWI2MjhhYmE3 ODQyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk M2YxNjg3NDgtZTliMy00OTc1LTlhNWEtZTE3ODk5NjIyNmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFsjS1NyqfCmtc5tdVRW5xs0FveViPhomX6E c1EWZ13NKNn0tFU2oxw7NHMTzdQRhFVZW94Hi2nDDBtNagfVOijkPdok2vFj0A7a tFSbMiJ/dMLuk/P/cUShP2Ck+YIjn0+MRhIP9hmGfEpKmgKb1fljXWH/9RUoMHJF BgQEgSm6MwSp4L97vURmsvPwzuwSLQirhmjrC2u7ACBSOA9n5Ra2sKFxMnCcMXCT 8NU5Xy+63Vm0UxOqxBL3/B4TnRwHgQspK2bxSUglYIz7wJ01GghL8ix+i/KTYwyH PsjJg3QoPL4m8Bk07X4uomieDBV46LD9Tb+tQxAG6+gMqDuoTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJRXuDAgJryQHZHrrhihowRcOspMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wNjNh YmNlZi00N2ZmLTQyNjctOTE5OC1lYjYyOGFiYTc4NDIvZDJiYmQ1OTgtZDA1MC0z ZTljLWI4YjctMThhOTc2NzMxZDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDYzYWJjZWYtNDdmZi00MjY3LTkx OTgtZWI2MjhhYmE3ODQyLzA2M2FiY2VmLTQ3ZmYtNDI2Ny05MTk4LWViNjI4YWJh Nzg0Mi5jcmwwHwYDVR0jBBgwFoAULT+tbVsf5f5/PtsiKw72zM1ofcIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wNjNhYmNlZi00N2ZmLTQyNjctOTE5OC1lYjYy OGFiYTc4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnvcgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACZleIBuwi9a9CuYZz6S/7VpUT+hrlSXUHL5XGpStBt2TNhAr0ombWE m0Uh5Jv44tpbKKcGIozdvgXYW1ng4HlfgKcVb/lD8JnIhU+AmiezgoGdyRIbMltO PNJZMgwfYSZcT03s9zOEulgFMuum94F5AZEBd7r2y07uUeYtSLll2l0GmnwexXsv VGYbO12TO4kj4JjvoQ3oTqYq+wKc7JM0q3h9335h/IMVlKdWg8tBqL7wFCUHvoit x8zaLcGzfhKDKsyTr4qCb4L8bQ1Z1LQYK8U7XA6BVojQNdZ1b6s10sS/IlZzLoHB y8/skTWG+wjiiN6D1Nr+tbFZun8KX9c= -----END CERTIFICATE-----Generated at Wed Jul 29 11:22:28 2026 by rpki-client